wulonchia/circle-overflow-poc

Circle Format Integer Overflow PoC

Proof of Concept for integer truncation vulnerability in Samsung ONE (onert-micro) Circle model parser.

Files

• poc_circle_reshape_overflow.py — Generates malicious .circle model file
• mff-poc-samsung-one-circle.py — Alternative PoC generator
• poc_circle_reshape_overflow.circle — Pre-generated malicious model (428 bytes)

Usage

python poc_circle_reshape_overflow.py
# Produces: poc_circle_reshape_overflow.circle

Vulnerability

Integer truncation in OMRuntimeAllocator (size_t → int32_t) leads to heap buffer overflow when loading crafted Circle models with large tensor dimensions.

Disclosure

Submitted via Huntr Model File Format program.